Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 CCM-IVS-08: Network Architecture Documentation

What else in your programme already covers this

This control maps to 29 controls across 16 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 4 controls

AC-4 Information Flow Enforcement
PL-8 Security and Privacy Architectures
SA-5 System Documentation
SC-7(4) External Telecommunications Services

FedRAMP Moderate · 4 controls

AC-4 Information Flow Enforcement
PL-8 Security and Privacy Architectures
SA-5 System Documentation
SC-7(4) External Telecommunications Services

NIST SP 800-161 Rev 1 · 3 controls

161R1-PL-8 Security and Privacy Architectures
161R1-PM-7 Enterprise Architecture
161R1-SC-30 Concealment and Misdirection

NIST SP 800-53 Rev 5 · 3 controls

NIST800-PL-8 PL-8 Security and Privacy Architectures
NIST800-PM-7 PM-7 Enterprise Architecture
NIST800-SA-5 SA-5 System Documentation

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 2 controls

ANSSI-HYG-04 Identify the Most Sensitive Information and Servers and Maintain a Network Diagram
ANSSI-HYG-23 Partition Internet Facing Services from the Rest of the Information System

ISO 27001:2022 · 2 controls

8.20 Networks security
8.21 Security of network services

ISO 27002:2022 · 2 controls

8.20 Networks security
8.21 Security of network services

AWS Well-Architected Security Pillar · 1 control

SEC05-BP04 Automate network protection

Australia Consumer Data Right - Banking (CDR) · 1 control

AUCDR-IS-STEP2 Step 2 - Define the boundaries of the CDR data environment

Azure Security Benchmark · 1 control

LT-4 Enable network logging for security investigation

C5 (Germany) · 1 control

C5-COS-07 Documentation of the network topology

CIS Controls v8 · 1 control

CIS-12.4 Establish and Maintain Architecture Diagram(s)

CMMC 2.0 · 1 control

SC.L2-3.13.2 Security Engineering

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-ID.AM-03 Representations of the organization's authorized network communication and internal and external network data flows are maintained

NIST SP 800-171 Rev 3 · 1 control

03.15.02 System Security Plan

PCI DSS 4.0 · 1 control

1.2.3 1.2.3 Accurate network diagram of CDE connections

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 have you already done?

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 CCM-IVS-08 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 140 of 197 Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 controls already carry evidence.

If you hold NIST SP 800-53 Rev 571.1% covered · 57 gaps If you hold FedRAMP Moderate60.4% covered · 78 gaps If you hold PCI DSS 4.060.4% covered · 78 gaps If you hold C5 (Germany)58.4% covered · 82 gaps If you hold ISO 27001:202256.3% covered · 86 gaps If you hold ISO 27002:202256.3% covered · 86 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 12 were rejected on the NIST SP 800-53 Rev 5 pair alone.

See the released pairs, $299 each Browse the graph free